{"ip":"209.38.96.43","data_as_of":"2026-10-24T13:05:49+00:00","observed":true,"total_events":144,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"44+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 44 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range.","Counts include 232 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"65,458 bytes sent","bytes_sent":65458,"session_seconds":3,"persistent":false},"basis":"combined"},"first_seen":"2026-10-22T00:22:08","last_seen":"2026-10-22T00:22:37","events_24h":0,"events_7d":144,"interactive_sessions":232,"interactive_sessions_24h":0,"interactive_sessions_7d":232,"interactive_protocols":[{"protocol":"http","sessions":167},{"protocol":"tls","sessions":18}],"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.352,"lon":4.9392,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as14061","label":"DigitalOcean","category":"cdn","url":"https://www.peeringdb.com/asn/14061"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":232,"first_seen":"2026-10-22T00:22:08","last_seen":"2026-10-22T00:22:33","verdicts":[{"verdict":"scan","sessions":203},{"verdict":"unknown","sessions":29}],"personas":[{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, gitlab@19.4.2","sessions":167}],"services":[{"protocol":"http","port":9166,"sessions":10},{"protocol":"http","port":9711,"sessions":10},{"protocol":"http","port":9182,"sessions":10},{"protocol":"tcp","port":9191,"sessions":10},{"protocol":"http","port":9804,"sessions":10},{"protocol":"http","port":9169,"sessions":10},{"protocol":"http","port":9123,"sessions":10},{"protocol":"http","port":9198,"sessions":10},{"protocol":"http","port":9172,"sessions":9},{"protocol":"http","port":9803,"sessions":9},{"protocol":"http","port":9185,"sessions":9},{"protocol":"http","port":9197,"sessions":9}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":203}]},"top_ports":[{"port":9123,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9161,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9166,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9169,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9182,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9198,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9711,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9804,"proto":"tcp","label":"HTTP","count":0,"sessions":12},{"port":9124,"proto":"tcp","label":"HTTP","count":0,"sessions":11},{"port":9142,"proto":"tcp","label":"HTTP","count":0,"sessions":11},{"port":9172,"proto":"tcp","label":"HTTP","count":0,"sessions":11},{"port":9185,"proto":"tcp","label":"HTTP","count":0,"sessions":11},{"port":9197,"proto":"tcp","label":"HTTP","count":0,"sessions":11},{"port":9350,"proto":"tcp","label":"HTTP","count":0,"sessions":11},{"port":9779,"proto":"tcp","label":"HTTP","count":0,"sessions":11}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_client_hello":"16030105cc010005c80303e3bd85bdff4fff4e7d75fbcebed64a73b122ce2a4a27dc58d7e3f66a7a65d6f3203a65a45d91b9b8ae450855d7b462d1ae32fae8a101e5526e23ac5877cd2a089b0026cca8cca9c02fc030c02bc02cc013c009c014c00a009c009d002f0035c012000a13031301130201000559000500050100000000000a0012001011ec11ed11eb0202001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff010001000010000e000c02683208687474702f312e3100120000002b0009080304030303020301003304ea04e811ec04c0dfb829d20b7793113f064037db2c3882c52e7a2021ec7b66ffd08771723d5080b6587361efc1aafd695670e5c226f453a7ac1c7de32990d41df141c6bdc74b562796a1c9327d5c1b61b0b5b0816d01ba74f21039c064938cb651c0b983737c4efdacc484003394aacb804c1fc2852ebf5a8b176b1e6592191c940e63ec4d6ad05a86e10f91291f94d229a1968af78c69af65b96f168a40b23a79272688a1c21f16801c08c1c90350640060b75b65b181a17ba8ab4b578db6a7546c07c917eb496c01cfe29c5a117912e8a0960f7c46ca609fdb3cac7413be89676c2c2192f6b1be2cea2076bb6fd5b3a9b3cccc74a073645964e022a458088151100eaca25ed72620082bce309926919194ca6337bf758137524be6450e4cd2a76b0c51259c76a40885dfc81ba7d2b70b187cffb0c936318e13c02fa9b19c661bacc187bb8c335725c1875cf4acd19888fbaab038014b3f57ceb83b16f6f63e5e470b285634a29690db49035aa604e7297478343e9d2b006d1c93e6fc04e084b18be63d9b609dc7da05271c273e5ba5967282ed3098315a7e8b680d31877602d959ef849015e65796519f78fb71ccb11b4f5a37e26cc28691297777c07f0c09000d6b6df6a957b42057192321996e3a2c3d76b29c517681705c3d70dc66b3a512e1123d7e3372028914a8c414a65850c718aaf22abb46898fc2d82f33531958952a87e5422ba975e9a40e5b231c5ba9705745b6c60419508b96c416b78615bbd419151314563aa618d2158b0d077bd6f57e4e764deae278b0438086598e6fb826e889142abb409b80b506fc00b18ba2fdc0015fa899c0bc81f1f605993845b0e2429c010248e0705059babd2c758307756f21cc8a3c888ec6ad5e385c86a855d2f23f882397910611311a8b945c1e2ad38b0f833955531f4260c3f1c19c8153436ab2a59ab5a0a052a966971ce8960157143102b3c5e6b3569d0a7e10babc80622bf642c345879708544baaf40d3a372e6527163f84990ed511d4b4045920aa15fc469c028d9cf45b29c5b96e177bc1543065d759fb7b75254005f1774c59d480c67ac9fa042be6090cca1c14f71b494caca5f421c86b21a85d3b206eba744a1566d37a6bdd881c60c298db316443276e3250af7603810246c752c480cd68b71712760ef33f3cf15336442dd1a8add7e430ff567538ea67541977dbe8be1af4a82904b012a43e2f87a1dcb70a4d492706b9be6977405b8a0c50a472f75549b5a263e277ab78cc5833d5585b522c1135a95db7bd1bc077fd33bf19a54ccd14926ad1281325b25e753fbf247d3602c00887377529b95313273702c3c472c319206f62e00fc13c39df99987ef8604835188a704af6c025d459129e3161e1170c45c040d6d704b5b83657a15d30101161cc51b6ca94f398a046e744214bb7f0aa95817a05e3844ba515497ff28863f9266561565fd32e37b7af578c952050264d866eb77ccf4ac82ac668a7c4722bbbecce75bba9d3c7bc4032a82c0755da225032c05d82916eb69b247ec9992f3026b6253f99949eba1990074c81c8d504e9d68dc0080ca6842de87ac00c76495b26668e216c8c074369dc78b0ab8ad4b4449e709d75353bcdc5956a4534296f4c13ba920ed3cb0e0992c24d9060eb003fce8d6bde464b212e5c0ee83fde063c4b87aae5d6cc4a95757779fba6265d539a23ddf051fe34b1ded460001d002000acee1fbac13560c5c96653e95d9205fd5c173a4bbdd8c8e9ee4c80","tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","e5c250b292fce278a62137836169e18f"],"http_akin":["b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["e5c250b292fce278a62137836169e18f"]}},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3247,"t13i1909h2_9dc949149365_97f8aa674fd9":770,"b11cun040_00040016_aa48e2c8":5481},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-22","count":144,"sessions":232}],"recent_events":[{"timestamp":"2026-10-22T00:22:37","port":9160,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9160\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393136300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"56c30634-ff2e-4db6-a164-6c3dac94ddc1","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9167,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9167\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393136370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"ad23590f-dfd5-4552-a9cd-9d374e95eda0","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9532,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9532\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393533320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"b8cf7636-ee8f-4698-a786-4ef1f42aa52d","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9180,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9180\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393138300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"705961ed-d98f-42b6-9bf4-2b5f76d0e6e8","seq":1,"duration_ms":101,"bytes_in":218,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9160,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9160\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393136300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"1b7e4c6a-437f-480c-9519-8b46ac571250","seq":1,"duration_ms":101,"bytes_in":230,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9160,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9160\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393136300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"72444a7f-d213-47a2-8a8f-ff12aa4ad4e3","seq":1,"duration_ms":100,"bytes_in":216,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9160,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9160\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393136300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"d1f6d632-3b2f-4baf-bd16-f80b9e89cda5","seq":1,"duration_ms":100,"bytes_in":217,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9445,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9445\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393434350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"0604f1d4-e505-4ea3-8130-ba714755635c","seq":1,"duration_ms":112,"bytes_in":218,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9147,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9147\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/security.txt","summary":"","payload_hex":"474554202f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393134370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"e095dab8-69f8-4f76-bd8b-056f7607ebc9","seq":1,"duration_ms":100,"bytes_in":218,"bytes_out":77},{"timestamp":"2026-10-22T00:22:37","port":9167,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9167\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a393136370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3134302e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"590cc348-a8b4-446c-b9b4-1134e53473e2","seq":1,"duration_ms":101,"bytes_in":230,"bytes_out":77}],"http_methods":[{"method":"GET","count":223}],"distinct_ports_total":44,"top_paths":[{"path":"/","count":34,"ports":24},{"path":"/robots.txt","count":34,"ports":24},{"path":"/favicon.ico","count":34,"ports":24},{"path":"/security.txt","count":34,"ports":24},{"path":"/.well-known/security.txt","count":34,"ports":24},{"path":"/favicon","count":10,"ports":10},{"path":"/wp-content/plugins/backup-backup/readme.txt","count":10,"ports":10},{"path":"/wp-content/plugins/contact-form-by-supsystic/readme.txt","count":10,"ports":10},{"path":"/wp-content/plugins/wp-time-capsule/readme.txt","count":10,"ports":10},{"path":"/wp-content/plugins/modular-connector/readme.txt","count":10,"ports":10},{"path":"/.well-known/robots.txt","count":3,"ports":3}],"distinct_paths_total":11,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2, http/1.1","count":120}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:9160","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}